@struktoai/mirage-node 0.0.3-alpha.0 → 0.0.4

package/dist/index.d.ts

@@ -1,27 +1,50 @@
-import { Workspace as Workspace$1, Resource, WorkspaceOptions, ExecuteOptions, ExecuteResult, ProvisionResult, Accessor, BaseResource, RegisteredOp, RegisteredCommand, PathSpec, FileStat, FindOptions, REDACTED_SECRET, CommandOpts, FileCache, OpRecord, S3Config as S3Config$1, S3ConfigRedacted as S3ConfigRedacted$1, S3Accessor, DatabricksVolumeConfig, DatabricksVolumeAccessor, DatabricksVolumeConfigRedacted, ResourceName, PgDriver, PostgresConfigResolved, PgQueryResult, PostgresAccessor, PostgresConfig, MongoDriver, EntityKind, MongoCollectionSpec, MongoFindOptions, MongoIterOptions, MongoIndexAccess, MongoDBConfigResolved, MongoDBAccessor, MongoDBConfig, LanceDriver, LanceDBConfigResolved, LanceRow, LanceDBAccessor, LanceDBConfig, SlackAccessor, DiscordAccessor, TrelloAccessor, LinearAccessor, NotionAccessor, LangfuseAccessor, GitHubAccessor, GitHubCIAccessor, GDocsAccessor, GSheetsAccessor, GSlidesAccessor, GDriveAccessor, DropboxAccessor, BoxAccessor, GoogleConfig, GmailAccessor, GoogleConfigRedacted } from '@struktoai/mirage-core';
+import { Resource, MountMode, CommandSafeguard, WorkspaceOptions, Workspace as Workspace$1, MountSpec, ExecuteOptions, ExecuteResult, ProvisionResult, Accessor, BaseResource, RegisteredOp, RegisteredCommand, PathSpec, FileStat, FindOptions, ObserverStore, NamespaceStore, NodeFields, SessionStore, SessionFields, WorkspaceStateStore, WorkspaceStateStoreOverrides, WorkspaceFields, REDACTED_SECRET, CommandOpts, FileCache, Session, OpRecord, S3Config as S3Config$1, S3ConfigRedacted as S3ConfigRedacted$1, S3Accessor, DatabricksVolumeConfig, DatabricksVolumeAccessor, DatabricksVolumeConfigRedacted, ResourceName, PgDriver, PostgresConfigResolved, PgQueryResult, PostgresAccessor, PostgresConfig, MongoDriver, EntityKind, MongoCollectionSpec, MongoFindOptions, MongoIterOptions, MongoIndexAccess, MongoDBConfigResolved, MongoDBAccessor, MongoDBConfig, LanceDriver, LanceDBConfigResolved, LanceRow, LanceDBAccessor, LanceDBConfig, SlackAccessor, DiscordAccessor, TrelloAccessor, LinearAccessor, NotionAccessor, LangfuseAccessor, GitHubAccessor, GitHubCIAccessor, GDocsAccessor, GSheetsAccessor, GSlidesAccessor, GDriveAccessor, DropboxAccessor, BoxAccessor, GoogleConfig, GmailAccessor, GoogleConfigRedacted } from '@struktoai/mirage-core';
 export * from '@struktoai/mirage-core';
 export { GoogleConfig as GmailConfig, GoogleConfigRedacted as GmailConfigRedacted, normalizeGoogleConfig as normalizeGmailConfig, redactGoogleConfig as redactGmailConfig } from '@struktoai/mirage-core';
+import { FileHandle } from 'node:fs/promises';
 import { RedisClientType } from 'redis';
+import { MongoClient, Db } from 'mongodb';
 import { Operator } from 'opendal';
 import { SFTPWrapper } from 'ssh2';
 import { ImapFlow } from 'imapflow';
 
-interface NodeWorkspaceOptions extends WorkspaceOptions {
-    /**
-     * Per-mount FUSE exposure: `{ '/data': true, '/s3': '/tmp/s3' }`. A value of
-     * `true` mounts at a fresh temp dir; a string pins the mountpoint (created if
-     * missing). Each entry becomes its own FUSE mount scoped to that prefix.
-     */
-    fuseMounts?: Record<string, boolean | string>;
+interface MountSpecOptions {
+    /** Per-mount mode override; falls back to the workspace default when unset. */
+    mode?: MountMode;
+    /** `true` mounts at a temp dir; a string pins the mountpoint to that path. */
+    fuse?: boolean | string;
+    commandSafeguards?: Record<string, CommandSafeguard>;
 }
+declare class Mount {
+    readonly resource: Resource;
+    readonly options: MountSpecOptions;
+    constructor(resource: Resource, options?: MountSpecOptions);
+}
+
+type NodeWorkspaceOptions = WorkspaceOptions;
 declare class Workspace extends Workspace$1 {
-    private readonly autoFuseManagers;
-    private readonly fuseMountpointsMap;
     private fuseSetupPromise;
-    constructor(resources: Record<string, Resource>, options?: NodeWorkspaceOptions);
-    /** Map each FUSE-exposed mount prefix to its live mountpoint. */
+    private readonly fuseMountpointsMap;
+    private readonly fuseManagers;
+    constructor(resources: Record<string, MountSpec | Mount>, options?: NodeWorkspaceOptions);
+    private registerFuseMount;
+    /**
+     * Mount a workspace subtree under FUSE and own its lifecycle. Each mount gets
+     * its own {@link FuseManager}, so a workspace can expose any number of FUSE
+     * subtrees at once. A pinned mountpoint is collision-checked BEFORE mounting,
+     * so a clash never leaves a partial kernel mount.
+     *
+     * A session-bound mount (`sessionId` given) runs every op under that
+     * session's mount grants (the kernel-tier primitive: bind-mount the tree
+     * into a container and the narrowing travels with it); it is keyed
+     * separately so the same prefix can also be exposed unbound.
+     */
+    addFuseMount(prefix: string, mountpoint?: string, sessionId?: string): Promise<string>;
+    removeFuseMount(prefix: string, sessionId?: string): Promise<void>;
     get fuseMountpoints(): Record<string, string>;
-    private ensureFuseReady;
+    get fuseMountpoint(): string | null;
+    /** Await the eager per-mount fuse mounts started in the constructor. */
+    fuseReady(): Promise<void>;
     execute(command: string, options?: ExecuteOptions & {
         provision?: false | undefined;
     }): Promise<ExecuteResult>;
@@ -43,10 +66,11 @@ interface DiskResourceOptions {
 interface DiskResourceState {
     type: string;
     files: Record<string, Uint8Array>;
+    modes?: Record<string, number>;
 }
 declare class DiskResource extends BaseResource implements Resource {
     readonly kind: "disk";
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt = "{prefix}\n  Local disk filesystem. Mirrors the configured root directory.\n  Standard commands: ls, cat, head, tail, grep, wc, find, tree, mkdir, touch, cp, mv, rm, tee.";
     readonly root: string;
@@ -75,7 +99,6 @@ declare class DiskResource extends BaseResource implements Resource {
     rmR(p: PathSpec): Promise<void>;
     du(p: PathSpec): Promise<number>;
     find(p: PathSpec, options?: FindOptions): Promise<string[]>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<DiskResourceState>;
     loadState(state: DiskResourceState): Promise<void>;
@@ -85,6 +108,279 @@ declare const DISK_PROMPT = "{prefix}\n  Local disk filesystem. Mirrors the conf
 
 declare const DISK_OPS: readonly RegisteredOp[];
 
+/**
+ * ObserverStore backed by a directory of JSONL files. Created lazily on
+ * first append. Mirrors the Python DiskObserverStore.
+ */
+declare class DiskObserverStore implements ObserverStore {
+    private readonly root;
+    constructor(root: string);
+    private abs;
+    append(key: string, data: Uint8Array): Promise<void>;
+    write(key: string, data: Uint8Array): Promise<void>;
+    readAll(): Promise<Map<string, Uint8Array>>;
+    readMatching(suffix: string): Promise<Map<string, Uint8Array>>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+    private walk;
+}
+
+interface RedisObserverStoreOptions {
+    url?: string;
+    keyPrefix?: string;
+}
+/**
+ * ObserverStore backed by Redis strings (one key per JSONL file).
+ *
+ * Appends use the atomic Redis APPEND command; an index set tracks which
+ * file keys exist so readAll needs no SCAN. Mirrors the Python
+ * RedisObserverStore.
+ */
+declare class RedisObserverStore implements ObserverStore {
+    readonly url: string;
+    private readonly prefix;
+    private readonly indexKey;
+    private clientPromise;
+    constructor(options?: RedisObserverStoreOptions);
+    private client;
+    append(key: string, data: Uint8Array): Promise<void>;
+    write(key: string, data: Uint8Array): Promise<void>;
+    readAll(): Promise<Map<string, Uint8Array>>;
+    readMatching(suffix: string): Promise<Map<string, Uint8Array>>;
+    private indexedPaths;
+    private readPaths;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+}
+
+/**
+ * NamespaceStore backed by one `namespace.json` per workspace.
+ *
+ * The whole plane is one human-readable record
+ * `{"nodes": {path: fields}, "user": ...}`: the namespace is bound to
+ * the workspace, so it serializes as one JSON file, not per-node
+ * files. Read-modify-writes take the record's lockfile so concurrent
+ * local processes never lose a node upsert; the write itself stays
+ * tmp-then-rename atomic, so readers never see a torn file. Mirrors
+ * the Python DiskNamespaceStore byte-for-byte on disk.
+ */
+declare class DiskNamespaceStore extends NamespaceStore {
+    private readonly records;
+    constructor(root: string);
+    private state;
+    private write;
+    load(): Promise<Map<string, NodeFields>>;
+    set(path: string, fields: NodeFields): Promise<void>;
+    delete(paths: readonly string[]): Promise<void>;
+    replaceAll(entries: Map<string, NodeFields>): Promise<void>;
+    loadUser(): Promise<string | null>;
+    setUser(user: string): Promise<void>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+}
+
+interface RedisNamespaceStoreOptions {
+    url?: string;
+    keyPrefix?: string;
+}
+/**
+ * NamespaceStore backed by one Redis hash (path -> JSON fields).
+ *
+ * Symlinks and attribute overlays survive process restarts and are visible
+ * to any workspace pointed at the same key prefix. Writes are
+ * single-command (HSET/HDEL) so mutations stay one round trip. Mirrors the
+ * Python RedisNamespaceStore.
+ */
+declare class RedisNamespaceStore extends NamespaceStore {
+    readonly url: string;
+    private readonly key;
+    private readonly userKey;
+    private clientPromise;
+    constructor(options?: RedisNamespaceStoreOptions);
+    private client;
+    load(): Promise<Map<string, NodeFields>>;
+    set(path: string, fields: NodeFields): Promise<void>;
+    delete(paths: readonly string[]): Promise<void>;
+    replaceAll(entries: Map<string, NodeFields>): Promise<void>;
+    loadUser(): Promise<string | null>;
+    setUser(user: string): Promise<void>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+}
+
+/**
+ * One JSON-record-per-file client with lockfile CAS.
+ *
+ * The disk twin of `S3RecordClient`: a record is one file at
+ * `{root}/{prefix}{name}.json`, written atomically (tmp then rename(2))
+ * so readers never see a torn record. The conditional write serializes
+ * on a `{record}.lock` created with O_CREAT|O_EXCL, so compare and
+ * write hit the same stored version. Record names are percent-encoded
+ * into filenames, so any id is safe. Mirrors the Python
+ * DiskRecordClient byte-for-byte on disk.
+ */
+declare class DiskRecordClient {
+    private readonly dir;
+    constructor(root: string, prefix: string);
+    recordPath(name: string): string;
+    get(name: string): Promise<[Record<string, unknown> | null, string]>;
+    put(name: string, fields: Record<string, unknown>): Promise<void>;
+    /**
+     * Write one record iff its stored generation matches.
+     *
+     * Take the record's lockfile, re-read under the lock, check the
+     * generation, then tmp-write + rename. Losing the lock race or the
+     * generation check resolves false; the caller adopts and retries.
+     */
+    casPut(name: string, fields: Record<string, unknown>, expectedGeneration: number): Promise<boolean>;
+    listNames(): Promise<string[]>;
+    loadAll(): Promise<Map<string, Record<string, unknown>>>;
+    delete(names: Iterable<string>): Promise<void>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+    /**
+     * Block until this record's lockfile is held; handle to release.
+     *
+     * For callers doing a read-modify-write that is not generation-CAS
+     * (e.g. the single-file namespace plane); spins past contention and
+     * reclaims stale locks, throwing only if a live writer holds the
+     * lock for the whole retry budget (~10s).
+     */
+    lock(name: string): Promise<FileHandle>;
+    unlock(name: string, fh: FileHandle): Promise<void>;
+    private acquireLock;
+    private reclaimStaleLock;
+    private releaseLock;
+    private writeRecord;
+}
+/**
+ * SessionStore backed by per-session files under one directory.
+ *
+ * One file per session at `{root}/sessions/{session_id}.json`, lockfile
+ * CAS per record, so multiple local processes share one session table
+ * with the same generation contract as the Redis Lua script, with zero
+ * infrastructure. Mirrors the Python DiskSessionStore.
+ */
+declare class DiskSessionStore extends SessionStore {
+    private readonly records;
+    constructor(root: string);
+    load(): Promise<Map<string, SessionFields>>;
+    set(sessionId: string, fields: SessionFields): Promise<void>;
+    casSet(sessionId: string, fields: SessionFields, expectedGeneration: number): Promise<boolean>;
+    delete(sessionIds: readonly string[]): Promise<void>;
+    replaceAll(entries: Map<string, SessionFields>): Promise<void>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+}
+
+interface RedisSessionStoreOptions {
+    url?: string;
+    keyPrefix?: string;
+}
+/**
+ * SessionStore backed by one Redis hash (session id -> JSON fields).
+ *
+ * Sessions and the mount grants they carry survive restarts and are
+ * visible to every workspace pointed at the same key prefix — the seam
+ * that lets one process create a session and another (a kernel tier, a
+ * sibling daemon) bind a mountpoint to it. Writes are single-command
+ * (HSET/HDEL) so mutations stay one round trip. Mirrors the Python
+ * RedisSessionStore.
+ */
+declare class RedisSessionStore extends SessionStore {
+    readonly url: string;
+    private readonly key;
+    private clientPromise;
+    constructor(options?: RedisSessionStoreOptions);
+    private client;
+    casSet(sessionId: string, fields: SessionFields, expectedGeneration: number): Promise<boolean>;
+    load(): Promise<Map<string, SessionFields>>;
+    set(sessionId: string, fields: SessionFields): Promise<void>;
+    delete(sessionIds: readonly string[]): Promise<void>;
+    replaceAll(entries: Map<string, SessionFields>): Promise<void>;
+    clear(): Promise<void>;
+    close(): Promise<void>;
+}
+
+declare const DEFAULT_STATE_ROOT = "~/.mirage/state";
+interface DiskWorkspaceStateStoreOptions extends WorkspaceStateStoreOverrides {
+    root?: string;
+}
+/**
+ * WorkspaceStateStore backed by a directory tree.
+ *
+ * Each workspace is one self-contained directory (delete a workspace
+ * by removing its folder):
+ *
+ * - `{root}/workspaces/{ws}/workspace.json` — metadata record
+ * - `{root}/workspaces/{ws}/sessions/{sid}.json` — session table
+ * - `{root}/workspaces/{ws}/namespace.json` — nodes + user, one JSON
+ * - `{root}/workspaces/{ws}/history/<day>/<sid>.jsonl` — history
+ *
+ * The layout mirrors the S3 store file-for-object; mutable records get
+ * the same generation-CAS contract via the lockfile protocol
+ * (O_CREAT|O_EXCL mutex, tmp write, rename(2)), so multiple local
+ * processes share one workspace with zero infrastructure: a CLI-created
+ * workspace survives restart like `git init`. Local filesystems only;
+ * anything cross-machine belongs on redis or s3. Mirrors the Python
+ * DiskWorkspaceStateStore byte-for-byte on disk.
+ */
+declare class DiskWorkspaceStateStore extends WorkspaceStateStore {
+    private readonly root;
+    private readonly meta;
+    private readonly namespaces;
+    private readonly observers;
+    private readonly sessionTables;
+    constructor(options?: DiskWorkspaceStateStoreOptions);
+    private wsRoot;
+    private metaClient;
+    protected makeNamespace(workspaceId: string): NamespaceStore;
+    protected makeObserver(workspaceId: string): ObserverStore;
+    protected makeSessions(workspaceId: string): SessionStore;
+    protected readMeta(workspaceId: string): Promise<WorkspaceFields | null>;
+    protected writeMeta(workspaceId: string, fields: WorkspaceFields): Promise<void>;
+    protected casWriteMeta(workspaceId: string, fields: WorkspaceFields, expectedGeneration: number): Promise<boolean>;
+    protected closeSelf(): Promise<void>;
+}
+
+interface RedisWorkspaceStateStoreOptions extends WorkspaceStateStoreOverrides {
+    url?: string;
+    keyPrefix?: string;
+}
+/**
+ * WorkspaceStateStore backed by one Redis server.
+ *
+ * Key layout under one prefix, everything scoped by workspace id:
+ *
+ * - `{prefix}workspaces` — hash, workspace id -> metadata JSON
+ * - `{prefix}{ws}:namespace:nodes` (+ `:user`) — namespace plane
+ * - `{prefix}{ws}:observer:*` — observer plane
+ * - `{prefix}{ws}:sessions` — session table
+ *
+ * All plane state survives restarts and is visible to every process
+ * pointed at the same url and prefix, so a workspace rebuilt from its
+ * config alone gets identical overlays, history, sessions, and grants.
+ * Mirrors the Python RedisWorkspaceStateStore.
+ */
+declare class RedisWorkspaceStateStore extends WorkspaceStateStore {
+    readonly url: string;
+    private readonly prefix;
+    private readonly metaKey;
+    private clientPromise;
+    private readonly namespaces;
+    private readonly observers;
+    private readonly sessionTables;
+    constructor(options?: RedisWorkspaceStateStoreOptions);
+    private client;
+    protected makeNamespace(workspaceId: string): NamespaceStore;
+    protected makeObserver(workspaceId: string): ObserverStore;
+    protected makeSessions(workspaceId: string): SessionStore;
+    protected readMeta(workspaceId: string): Promise<WorkspaceFields | null>;
+    protected writeMeta(workspaceId: string, fields: WorkspaceFields): Promise<void>;
+    protected casWriteMeta(workspaceId: string, fields: WorkspaceFields, expectedGeneration: number): Promise<boolean>;
+    protected closeSelf(): Promise<void>;
+}
+
 /**
  * Monkey-patch Node's `fs` module so that paths under any mirage mount
  * route through the workspace. Paths NOT under a mount fall through to
@@ -109,6 +405,7 @@ declare class RedisStore {
     fk(path: string): string;
     dk(): string;
     mk(path: string): string;
+    ak(path: string): string;
     client(): Promise<RedisClientType>;
     getFile(path: string): Promise<Uint8Array | null>;
     setFile(path: string, data: Uint8Array): Promise<void>;
@@ -116,7 +413,6 @@ declare class RedisStore {
     hasFile(path: string): Promise<boolean>;
     listFiles(prefix?: string): Promise<string[]>;
     fileLen(path: string): Promise<number>;
-    getRange(path: string, start: number, end: number): Promise<Uint8Array>;
     hasDir(path: string): Promise<boolean>;
     addDir(path: string): Promise<void>;
     removeDir(path: string): Promise<void>;
@@ -124,6 +420,9 @@ declare class RedisStore {
     getModified(path: string): Promise<string | null>;
     setModified(path: string, ts: string): Promise<void>;
     delModified(path: string): Promise<void>;
+    getAttrs(path: string): Promise<Record<string, string>>;
+    setAttrs(path: string, fields: Record<string, string>): Promise<void>;
+    delAttrs(path: string): Promise<void>;
     clear(): Promise<void>;
     close(): Promise<void>;
 }
@@ -154,10 +453,12 @@ interface RedisResourceState {
     keyPrefix: string;
     files: Record<string, Uint8Array>;
     dirs: string[];
+    attrs?: Record<string, Record<string, string>>;
+    modified?: Record<string, string>;
 }
 declare class RedisResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly url: string;
@@ -214,9 +515,13 @@ declare class RedisFileCacheStore extends RedisResource implements FileCache {
     private readonly limit;
     private readonly dataPrefix;
     private readonly metaPrefix;
-    maxDrainBytes: number | null;
+    private maxDrainBytesValue;
+    readonly drainTasks: Map<string, Promise<void>>;
     constructor(options?: RedisFileCacheOptions);
-    readonly cacheSize = 0;
+    get maxDrainBytes(): number | null;
+    set maxDrainBytes(value: number | null);
+    readonly cacheSize: number | null;
+    readonly cacheEntries: number | null;
     get cacheLimit(): number;
     cacheClient(): Promise<RedisClientType>;
     get(key: string): Promise<Uint8Array | null>;
@@ -238,13 +543,17 @@ declare class RedisFileCacheStore extends RedisResource implements FileCache {
 
 interface FuseHandle {
     mountpoint: string;
+    /** Whether Mirage created this mountpoint directory and may remove it later. */
+    ownsMountpoint: boolean;
     unmount: () => Promise<void>;
 }
 interface MountOptions {
+    /** Caller/deployment-owned mountpoint. Mirage mounts here but does not delete it. */
     mountpoint?: string;
-    agentId?: string;
     /** Scope the mount to a single workspace mount prefix (subtree exposure). */
     rootPrefix?: string;
+    /** Run every op under this session's mount grants (session-bound mountpoint). */
+    session?: Session;
     /**
      * When true, `@zkochan/fuse-native`'s `autoUnmount` flag is set so the
      * kernel releases the mount if the process exits abnormally. Defaults to
@@ -253,7 +562,11 @@ interface MountOptions {
      * FuseManager runs `diskutil unmount force` instead.
      */
     autoUnmount?: boolean;
-    /** Extra options forwarded verbatim to `@zkochan/fuse-native`. */
+    /**
+     * Extra options forwarded verbatim to `@zkochan/fuse-native`.
+     * `directIO: false` additionally skips the `direct_io` mount option that
+     * Mirage appends by default (see appendDirectIO).
+     */
     fuseOptions?: Record<string, unknown>;
 }
 declare function mount(ws: Workspace$1, options?: MountOptions): Promise<FuseHandle>;
@@ -261,14 +574,11 @@ declare function mountBackground(ws: Workspace$1, options?: MountOptions): Promi
 
 declare class FuseManager {
     private handle;
-    private externalMountpoint;
-    private auto;
     private cleanupEntry;
     get mountpoint(): string | null;
-    set mountpoint(path: string | null);
     setup(ws: Workspace$1, options?: MountOptions): Promise<string>;
-    unmount(ws?: Workspace$1): Promise<void>;
-    close(ws?: Workspace$1): Promise<void>;
+    unmount(): Promise<void>;
+    close(): Promise<void>;
 }
 
 interface FuseAttr {
@@ -282,36 +592,59 @@ interface FuseAttr {
     gid: number;
 }
 interface MirageFSOptions {
-    agentId?: string;
     rootPrefix?: string;
+    /**
+     * Bind every FUSE op to this session's mount grants. The kernel-tier
+     * primitive: bind-mount the tree into a container and the narrowing
+     * travels with it. Enforcement happens inside dispatch/Ops via the
+     * session context, so binding at the op entry point is sufficient.
+     */
+    session?: Session;
 }
 declare class MirageFS {
     private readonly ws;
-    readonly agentId: string;
     private readonly now;
     private readonly root;
     private readonly prefixes;
     private readonly handles;
+    private readonly xattrs;
     private readonly prefetchCache;
     private readonly prefetchInflight;
     private nextFh;
     private readonly uid;
     private readonly gid;
+    private readonly session;
     constructor(ws: Workspace$1, options?: MirageFSOptions);
     private resolve;
-    private whoamiContent;
     private dirStat;
     private fileStat;
+    /**
+     * Fold merged stat attributes into a FUSE attr. The workspace stat
+     * already carries the namespace overlay (chmod bits, chown ids, touched
+     * mtime), so honoring these fields here is what makes metadata ops
+     * visible over FUSE. String uid/gid (names) are skipped: FUSE wants
+     * numeric ids and there is no user db to map against.
+     */
+    private applyStatAttrs;
+    /**
+     * The target to present for a namespace link at a FUSE path, or null
+     * when not a link. Relative targets are stored verbatim and returned
+     * as-is. Absolute targets name virtual paths, so they are rewritten
+     * relative to the link's directory: returned raw, the kernel would
+     * resolve them against the host root and escape the mountpoint.
+     */
+    private linkTarget;
+    private linkStat;
     private isVirtualDir;
     private virtualChildren;
     private cachedSize;
     private cachedData;
     /**
-     * Fetch bytes for a size-unknown file and cache them so the immediate
-     * getattr → open → read burst (and subsequent stats within the TTL) reuse
-     * the same fetch. Required because @zkochan/fuse-native doesn't expose
-     * libfuse's `direct_io` flag — without a real size from getattr, the kernel
-     * decides the file is empty and never issues read().
+     * Fetch bytes for a size-unknown file and cache them so the open → read →
+     * fstat burst (and subsequent stats within the TTL) reuse the same fetch.
+     * With getattr reporting 0 pre-open, this hydration is what lets fgetattr
+     * answer with the real byte length after open (mirrors Python's
+     * `_prefetch_read`).
      */
     private prefetch;
     /** Drain and return accumulated op records (mirrors Python's drain_ops). */
@@ -325,6 +658,15 @@ declare class MirageFS {
     private write;
     private create;
     private mkdir;
+    private readlink;
+    /**
+     * Create namespace link `dest -> src` (ln -s src dest; libfuse passes
+     * the pointee first). Relative sources are stored verbatim (resolved
+     * at follow time, exactly like the shell `ln -s`); absolute sources
+     * are mapped into virtual space so a scoped mount stores the path it
+     * will later follow.
+     */
+    private symlink;
     private unlink;
     private rename;
     private rmdir;
@@ -334,6 +676,10 @@ declare class MirageFS {
     private chown;
     private utimens;
     private access;
+    private setxattr;
+    private getxattr;
+    private listxattr;
+    private removexattr;
     private getattrValidate;
     private open;
     private release;
@@ -357,7 +703,7 @@ interface S3ResourceState {
 }
 declare class S3Resource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly supportsSnapshot: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
@@ -386,18 +732,83 @@ declare class S3Resource extends BaseResource implements Resource {
     du(p: PathSpec): Promise<number>;
     find(p: PathSpec, options?: FindOptions): Promise<string[]>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     getState(): Promise<S3ResourceState>;
     loadState(_state: S3ResourceState): Promise<void>;
 }
 
+interface GridFSConfig {
+    uri: string;
+    database: string;
+    bucket?: string;
+    keyPrefix?: string;
+    chunkSizeBytes?: number;
+}
+interface GridFSConfigRedacted extends Omit<GridFSConfig, 'uri'> {
+    uri?: string;
+}
+/**
+ * Translate Python-style snake_case keys (as used in YAML configs and the
+ * Python `GridFSConfig`) to the TS-idiomatic camelCase fields, and
+ * normalize the key prefix the way the accessor expects.
+ */
+declare function normalizeGridFSConfig(input: Record<string, unknown>): GridFSConfig;
+
+declare class GridFSAccessor extends Accessor {
+    readonly config: GridFSConfig;
+    private clientPromise;
+    constructor(config: GridFSConfig);
+    client(): Promise<MongoClient>;
+    db(): Promise<Db>;
+    private _connect;
+    close(): Promise<void>;
+}
+
+interface GridFSResourceState {
+    type: string;
+    config: GridFSConfigRedacted;
+}
+declare class GridFSResource extends BaseResource implements Resource {
+    readonly kind: string;
+    readonly cachesReads: boolean;
+    readonly supportsSnapshot: boolean;
+    readonly indexTtl: number;
+    readonly prompt: string;
+    readonly config: GridFSConfig;
+    readonly accessor: GridFSAccessor;
+    readonly opsMap: Record<string, unknown>;
+    constructor(config: GridFSConfig);
+    open(): Promise<void>;
+    close(): Promise<void>;
+    commands(): readonly RegisteredCommand[];
+    ops(): readonly RegisteredOp[];
+    streamPath(p: PathSpec): AsyncIterable<Uint8Array>;
+    readFile(p: PathSpec): Promise<Uint8Array>;
+    writeFile(p: PathSpec, data: Uint8Array): Promise<void>;
+    appendFile(p: PathSpec, data: Uint8Array): Promise<void>;
+    readdir(p: PathSpec): Promise<string[]>;
+    stat(p: PathSpec): Promise<FileStat>;
+    exists(p: PathSpec): Promise<boolean>;
+    mkdir(p: PathSpec): Promise<void>;
+    rmdir(p: PathSpec): Promise<void>;
+    unlink(p: PathSpec): Promise<void>;
+    rename(src: PathSpec, dst: PathSpec): Promise<void>;
+    truncate(p: PathSpec, length: number): Promise<void>;
+    copy(src: PathSpec, dst: PathSpec): Promise<void>;
+    rmR(p: PathSpec): Promise<void>;
+    du(p: PathSpec): Promise<number>;
+    find(p: PathSpec, options?: FindOptions): Promise<string[]>;
+    glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
+    getState(): Promise<GridFSResourceState>;
+    loadState(_state: GridFSResourceState): Promise<void>;
+}
+
 interface DatabricksVolumeResourceState {
     type: string;
     config: DatabricksVolumeConfigRedacted;
 }
 declare class DatabricksVolumeResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: DatabricksVolumeConfig;
@@ -444,6 +855,7 @@ interface GCSConfig {
     region?: string;
     timeoutMs?: number;
     forcePathStyle?: boolean;
+    keyPrefix?: string;
 }
 interface GCSConfigRedacted {
     bucket: string;
@@ -452,6 +864,8 @@ interface GCSConfigRedacted {
     endpoint: string;
     region: string;
     timeoutMs?: number;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
 }
 declare function redactGcsConfig(config: GCSConfig): GCSConfigRedacted;
 
@@ -481,6 +895,7 @@ interface OCIConfig {
     accessKeyId: string;
     secretAccessKey: string;
     endpoint?: string;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface OCIConfigRedacted {
@@ -490,6 +905,7 @@ interface OCIConfigRedacted {
     accessKeyId: string;
     secretAccessKey: string;
     endpoint: string;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function redactOciConfig(config: OCIConfig): OCIConfigRedacted;
@@ -521,6 +937,8 @@ interface R2Config {
     endpoint?: string;
     region?: string;
     profile?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface R2ConfigRedacted {
@@ -531,6 +949,8 @@ interface R2ConfigRedacted {
     endpoint: string;
     region: string;
     profile?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function redactR2Config(config: R2Config): R2ConfigRedacted;
@@ -562,6 +982,7 @@ interface SupabaseConfig {
     projectRef?: string;
     endpoint?: string;
     sessionToken?: string;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface SupabaseConfigRedacted {
@@ -572,6 +993,7 @@ interface SupabaseConfigRedacted {
     accessKeyId: string;
     secretAccessKey: string;
     sessionToken?: string;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedSupabaseEndpoint(config: SupabaseConfig): string;
@@ -671,7 +1093,7 @@ declare abstract class HfResource extends BaseResource implements Resource {
     abstract readonly kind: string;
     abstract readonly prompt: string;
     abstract readonly accessor: HfAccessor;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly supportsSnapshot: boolean;
     readonly opsMap: Record<string, unknown>;
     open(): Promise<void>;
@@ -689,7 +1111,6 @@ declare abstract class HfResource extends BaseResource implements Resource {
     du(p: PathSpec): Promise<number>;
     find(p: PathSpec, options?: FindOptions): Promise<string[]>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     loadState(_state: unknown): Promise<void>;
 }
 
@@ -769,6 +1190,7 @@ interface MinIOConfig {
     secretAccessKey: string;
     region?: string;
     forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface MinIOConfigRedacted {
@@ -778,6 +1200,7 @@ interface MinIOConfigRedacted {
     secretAccessKey: string;
     region: string;
     forcePathStyle: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function redactMinIOConfig(config: MinIOConfig): MinIOConfigRedacted;
@@ -808,6 +1231,7 @@ interface SeaweedFSConfig {
     secretAccessKey: string;
     region?: string;
     forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface SeaweedFSConfigRedacted {
@@ -817,6 +1241,7 @@ interface SeaweedFSConfigRedacted {
     secretAccessKey: string;
     region: string;
     forcePathStyle: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function redactSeaweedFSConfig(config: SeaweedFSConfig): SeaweedFSConfigRedacted;
@@ -847,6 +1272,7 @@ interface CephConfig {
     secretAccessKey: string;
     region?: string;
     forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface CephConfigRedacted {
@@ -856,6 +1282,7 @@ interface CephConfigRedacted {
     secretAccessKey: string;
     region: string;
     forcePathStyle: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function redactCephConfig(config: CephConfig): CephConfigRedacted;
@@ -885,6 +1312,8 @@ interface WasabiConfig {
     secretAccessKey: string;
     region?: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface WasabiConfigRedacted {
@@ -893,6 +1322,8 @@ interface WasabiConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedWasabiEndpoint(config: WasabiConfig): string;
@@ -923,6 +1354,8 @@ interface BackblazeConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface BackblazeConfigRedacted {
@@ -931,6 +1364,8 @@ interface BackblazeConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedBackblazeEndpoint(config: BackblazeConfig): string;
@@ -961,6 +1396,8 @@ interface DigitalOceanConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface DigitalOceanConfigRedacted {
@@ -969,6 +1406,8 @@ interface DigitalOceanConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedDigitalOceanEndpoint(config: DigitalOceanConfig): string;
@@ -999,6 +1438,8 @@ interface TencentConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface TencentConfigRedacted {
@@ -1007,6 +1448,8 @@ interface TencentConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedTencentEndpoint(config: TencentConfig): string;
@@ -1037,6 +1480,8 @@ interface AliyunConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface AliyunConfigRedacted {
@@ -1045,6 +1490,8 @@ interface AliyunConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedAliyunEndpoint(config: AliyunConfig): string;
@@ -1075,6 +1522,8 @@ interface ScalewayConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface ScalewayConfigRedacted {
@@ -1083,6 +1532,8 @@ interface ScalewayConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedScalewayEndpoint(config: ScalewayConfig): string;
@@ -1113,6 +1564,8 @@ interface QingStorConfig {
     secretAccessKey: string;
     region: string;
     endpoint?: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 interface QingStorConfigRedacted {
@@ -1121,6 +1574,8 @@ interface QingStorConfigRedacted {
     secretAccessKey: string;
     region: string;
     endpoint: string;
+    forcePathStyle?: boolean;
+    keyPrefix?: string;
     timeoutMs?: number;
 }
 declare function resolvedQingStorEndpoint(config: QingStorConfig): string;
@@ -1169,7 +1624,7 @@ interface PostgresResourceOptions {
 }
 declare class PostgresResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: PostgresConfigResolved;
@@ -1260,7 +1715,7 @@ interface MongoDBResourceOptions {
 }
 declare class MongoDBResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: MongoDBConfigResolved;
@@ -1297,7 +1752,7 @@ interface LanceDBResourceOptions {
 }
 declare class LanceDBResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: LanceDBConfigResolved;
@@ -1316,10 +1771,12 @@ declare class LanceDBResource extends BaseResource implements Resource {
 interface SlackConfig {
     token: string;
     searchToken?: string;
+    baseUrl?: string;
 }
 interface SlackConfigRedacted {
     token: '<REDACTED>';
     searchToken?: '<REDACTED>';
+    baseUrl?: string;
 }
 declare function redactSlackConfig(config: SlackConfig): SlackConfigRedacted;
 declare function normalizeSlackConfig(input: Record<string, unknown>): SlackConfig;
@@ -1330,7 +1787,7 @@ interface SlackResourceState {
 }
 declare class SlackResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1344,7 +1801,6 @@ declare class SlackResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<SlackResourceState>;
     loadState(_state: SlackResourceState): Promise<void>;
@@ -1394,7 +1850,7 @@ interface SSHResourceState {
 }
 declare class SSHResource extends BaseResource implements Resource {
     readonly kind: "ssh";
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt = "{prefix}\n  Remote filesystem via SSH/SFTP.\n  IMPORTANT: This is a remote mount. Prefer targeted reads over full scans.\n  Supports: ls, cat, head, tail, grep, rg, wc, find, tree, stat, mkdir, touch, cp, mv, rm, tee.";
     readonly config: SSHConfig;
@@ -1423,7 +1879,6 @@ declare class SSHResource extends BaseResource implements Resource {
     rmR(p: PathSpec): Promise<void>;
     du(p: PathSpec): Promise<number>;
     find(p: PathSpec, options?: FindOptions): Promise<string[]>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<SSHResourceState>;
     loadState(_state: SSHResourceState): Promise<void>;
@@ -1435,6 +1890,72 @@ declare const SSH_COMMANDS: readonly RegisteredCommand[];
 
 declare const SSH_OPS: readonly RegisteredOp[];
 
+interface NextcloudConfig {
+    url: string;
+    username?: string;
+    password?: string;
+    verifySsl?: boolean;
+    timeout?: number;
+}
+interface NextcloudConfigRedacted extends Omit<NextcloudConfig, 'password'> {
+    password?: '<REDACTED>';
+}
+declare function normalizeNextcloudConfig(config: Record<string, unknown>): NextcloudConfig;
+declare function redactNextcloudConfig(config: NextcloudConfig): NextcloudConfigRedacted;
+
+declare class NextcloudAccessor extends Accessor {
+    readonly config: NextcloudConfig;
+    readonly resourceName: "nextcloud";
+    private operatorPromise;
+    constructor(config: NextcloudConfig);
+    operator(): Promise<Operator>;
+    private createOperator;
+}
+
+interface NextcloudResourceState {
+    type: string;
+    config: NextcloudConfigRedacted;
+}
+declare class NextcloudResource extends BaseResource implements Resource {
+    readonly config: NextcloudConfig;
+    readonly kind: "nextcloud";
+    readonly cachesReads = true;
+    readonly supportsSnapshot = true;
+    readonly prompt = "You have access to files stored in Nextcloud.";
+    readonly accessor: NextcloudAccessor;
+    readonly opsMap: Record<string, unknown>;
+    constructor(config: NextcloudConfig);
+    open(): Promise<void>;
+    close(): Promise<void>;
+    commands(): readonly RegisteredCommand[];
+    ops(): readonly RegisteredOp[];
+    streamPath(path: PathSpec): AsyncIterable<Uint8Array>;
+    readFile(path: PathSpec): Promise<Uint8Array>;
+    writeFile(path: PathSpec, data: Uint8Array): Promise<void>;
+    appendFile(path: PathSpec, data: Uint8Array): Promise<void>;
+    readdir(path: PathSpec): Promise<string[]>;
+    stat(path: PathSpec): Promise<FileStat>;
+    exists(path: PathSpec): Promise<boolean>;
+    mkdir(path: PathSpec): Promise<void>;
+    rmdir(path: PathSpec): Promise<void>;
+    unlink(path: PathSpec): Promise<void>;
+    rename(source: PathSpec, destination: PathSpec): Promise<void>;
+    truncate(path: PathSpec, length: number): Promise<void>;
+    copy(source: PathSpec, destination: PathSpec): Promise<void>;
+    rmR(path: PathSpec): Promise<void>;
+    du(path: PathSpec): Promise<number>;
+    find(path: PathSpec, options?: FindOptions): Promise<string[]>;
+    glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
+    getState(): Promise<NextcloudResourceState>;
+    loadState(_state: NextcloudResourceState): Promise<void>;
+}
+
+declare const NEXTCLOUD_PROMPT = "You have access to files stored in Nextcloud.";
+
+declare const NEXTCLOUD_COMMANDS: readonly RegisteredCommand[];
+
+declare const NEXTCLOUD_OPS: readonly RegisteredOp[];
+
 interface DiscordConfig {
     token: string;
 }
@@ -1450,7 +1971,7 @@ interface DiscordResourceState {
 }
 declare class DiscordResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1464,7 +1985,6 @@ declare class DiscordResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<DiscordResourceState>;
     loadState(_state: DiscordResourceState): Promise<void>;
@@ -1493,7 +2013,7 @@ interface TrelloResourceState {
 }
 declare class TrelloResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1508,7 +2028,6 @@ declare class TrelloResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<TrelloResourceState>;
     loadState(_state: TrelloResourceState): Promise<void>;
@@ -1535,7 +2054,7 @@ interface LinearResourceState {
 }
 declare class LinearResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1550,7 +2069,6 @@ declare class LinearResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<LinearResourceState>;
     loadState(_state: LinearResourceState): Promise<void>;
@@ -1573,7 +2091,7 @@ interface NotionResourceState {
 }
 declare class NotionResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1587,7 +2105,6 @@ declare class NotionResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<NotionResourceState>;
     loadState(_state: NotionResourceState): Promise<void>;
@@ -1618,7 +2135,7 @@ interface LangfuseResourceState {
 }
 declare class LangfuseResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: LangfuseConfig;
@@ -1631,7 +2148,6 @@ declare class LangfuseResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(_p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<LangfuseResourceState>;
     loadState(_state: LangfuseResourceState): Promise<void>;
@@ -1662,7 +2178,8 @@ interface GitHubResourceState {
 }
 declare class GitHubResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
+    readonly supportsSnapshot: boolean;
     readonly indexTtl: number;
     readonly config: GitHubConfig;
     readonly accessor: GitHubAccessor;
@@ -1675,7 +2192,6 @@ declare class GitHubResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GitHubResourceState>;
     loadState(_state: GitHubResourceState): Promise<void>;
@@ -1706,7 +2222,7 @@ interface GitHubCIResourceState {
 }
 declare class GitHubCIResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: GitHubCIConfig;
@@ -1719,7 +2235,6 @@ declare class GitHubCIResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GitHubCIResourceState>;
     loadState(_state: GitHubCIResourceState): Promise<void>;
@@ -1748,7 +2263,7 @@ interface GDocsResourceState {
 }
 declare class GDocsResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1762,7 +2277,6 @@ declare class GDocsResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GDocsResourceState>;
     loadState(_state: GDocsResourceState): Promise<void>;
@@ -1791,7 +2305,7 @@ interface GSheetsResourceState {
 }
 declare class GSheetsResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1805,7 +2319,6 @@ declare class GSheetsResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GSheetsResourceState>;
     loadState(_state: GSheetsResourceState): Promise<void>;
@@ -1834,7 +2347,7 @@ interface GSlidesResourceState {
 }
 declare class GSlidesResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -1848,7 +2361,6 @@ declare class GSlidesResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GSlidesResourceState>;
     loadState(_state: GSlidesResourceState): Promise<void>;
@@ -1862,6 +2374,7 @@ interface GDriveConfig {
         accessToken: string;
         expiresIn: number;
     }>;
+    folderId?: string;
 }
 interface GDriveConfigRedacted {
     clientId: string;
@@ -1877,7 +2390,8 @@ interface GDriveResourceState {
 }
 declare class GDriveResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
+    readonly supportsSnapshot: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: GDriveConfig;
@@ -1890,7 +2404,6 @@ declare class GDriveResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GDriveResourceState>;
     loadState(_state: GDriveResourceState): Promise<void>;
@@ -1900,6 +2413,9 @@ interface DropboxConfig {
     clientId: string;
     clientSecret: string;
     refreshToken: string;
+    rootPath?: string;
+    contentSearch?: boolean;
+    endpoint?: string;
     refreshFn?: (refreshToken: string) => Promise<{
         accessToken: string;
         expiresIn: number;
@@ -1909,6 +2425,9 @@ interface DropboxConfigRedacted {
     clientId: string;
     clientSecret: '<REDACTED>';
     refreshToken: '<REDACTED>';
+    rootPath?: string;
+    contentSearch?: boolean;
+    endpoint?: string;
 }
 declare function redactDropboxConfig(config: DropboxConfig): DropboxConfigRedacted;
 declare function normalizeDropboxConfig(input: Record<string, unknown>): DropboxConfig;
@@ -1919,7 +2438,7 @@ interface DropboxResourceState {
 }
 declare class DropboxResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: DropboxConfig;
@@ -1932,13 +2451,15 @@ declare class DropboxResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<DropboxResourceState>;
     loadState(_state: DropboxResourceState): Promise<void>;
 }
 
 interface BoxConfig {
+    endpoint?: string;
+    rootFolderId?: string;
+    contentSearch?: boolean;
     clientId?: string;
     clientSecret?: string;
     refreshToken?: string;
@@ -1952,6 +2473,8 @@ interface BoxConfig {
     onRefreshTokenRotated?: (newRefreshToken: string) => void | Promise<void>;
 }
 interface BoxConfigRedacted {
+    endpoint?: string;
+    rootFolderId?: string;
     clientId?: string;
     clientSecret?: '<REDACTED>';
     refreshToken?: '<REDACTED>';
@@ -1967,7 +2490,7 @@ interface BoxResourceState {
 }
 declare class BoxResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: BoxConfig;
@@ -1980,7 +2503,6 @@ declare class BoxResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<BoxResourceState>;
     loadState(_state: BoxResourceState): Promise<void>;
@@ -1992,7 +2514,7 @@ interface GmailResourceState {
 }
 declare class GmailResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly writePrompt: string;
@@ -2006,7 +2528,6 @@ declare class GmailResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<GmailResourceState>;
     loadState(_state: GmailResourceState): Promise<void>;
@@ -2053,7 +2574,7 @@ interface EmailResourceState {
 }
 declare class EmailResource extends BaseResource implements Resource {
     readonly kind: string;
-    readonly isRemote: boolean;
+    readonly cachesReads: boolean;
     readonly indexTtl: number;
     readonly prompt: string;
     readonly config: EmailConfig;
@@ -2066,14 +2587,13 @@ declare class EmailResource extends BaseResource implements Resource {
     readFile(p: PathSpec): Promise<Uint8Array>;
     readdir(p: PathSpec): Promise<string[]>;
     stat(p: PathSpec): Promise<FileStat>;
-    fingerprint(p: PathSpec): Promise<string | null>;
     glob(paths: readonly PathSpec[], prefix?: string): Promise<PathSpec[]>;
     getState(): Promise<EmailResourceState>;
     loadState(_state: EmailResourceState): Promise<void>;
 }
 
-declare const EMAIL_PROMPT = "{prefix}\n  <folder>/\n    <yyyy-mm-dd>/\n      <subject>__<uid>.email.json\n      <subject>__<uid>/           # if attachments exist\n        <attachment-filename>\n  Folders include: INBOX, Sent, Drafts, etc. cat shows email as JSON.";
-declare const EMAIL_WRITE_PROMPT = "  Write commands:\n    email-send \"to@email.com\" \"subject\" \"body\"\n    email-reply <email-path> \"reply body\"\n    email-forward <email-path> \"to@email.com\"";
+declare const EMAIL_PROMPT = "{prefix}\n  <folder>/\n    <yyyy-mm-dd>/\n      <subject>__<uid>.email.json\n      <subject>__<uid>/           # if attachments exist\n        <attachment-filename>\n  Folders include: INBOX, Sent, Drafts, etc. cat shows email as JSON.\n\n  Read commands:\n    himalaya envelope list --folder INBOX --unseen        # id/from/subject/date\n    himalaya message read --folder INBOX --uid <uid>     # one message as JSON";
+declare const EMAIL_WRITE_PROMPT = "  Write commands:\n    himalaya message send --to \"to@email.com\" --subject \"Hi\" --body \"...\"\n    himalaya message reply --folder INBOX --uid <uid> --body \"...\" [--all]\n    himalaya message forward --folder INBOX --uid <uid> --to \"to@email.com\"";
 
 declare const EMAIL_COMMANDS: readonly RegisteredCommand[];
 
@@ -2113,4 +2633,4 @@ declare const DISK_COMMANDS: readonly RegisteredCommand[];
 
 declare const REDIS_COMMANDS: readonly RegisteredCommand[];
 
-export { ALIYUN_PROMPT, type AliyunConfig, type AliyunConfigRedacted, AliyunResource, type AliyunResourceState, BACKBLAZE_PROMPT, type BackblazeConfig, type BackblazeConfigRedacted, BackblazeResource, type BackblazeResourceState, type BoxConfig, type BoxConfigRedacted, BoxResource, type BoxResourceState, CEPH_PROMPT, type CephConfig, type CephConfigRedacted, CephResource, type CephResourceState, DIGITALOCEAN_PROMPT, DISK_COMMANDS, DISK_OPS, DISK_PROMPT, type DatabricksProfile, DatabricksVolumeResource, type DatabricksVolumeResourceState, type DigitalOceanConfig, type DigitalOceanConfigRedacted, DigitalOceanResource, type DigitalOceanResourceState, type DiscordConfig, type DiscordConfigRedacted, DiscordResource, type DiscordResourceState, DiskResource, type DiskResourceOptions, type DiskResourceState, type DropboxConfig, type DropboxConfigRedacted, DropboxResource, type DropboxResourceState, EMAIL_COMMANDS, EMAIL_OPS, EMAIL_PROMPT, EMAIL_WRITE_PROMPT, EmailAccessor, type EmailConfig, type EmailConfigInput, type EmailConfigRedacted, EmailResource, type EmailResourceState, type FuseAttr, type FuseHandle, FuseManager, type MountOptions as FuseMountOptions, type GCSConfig, type GCSConfigRedacted, GCSResource, type GCSResourceState, GCS_ENDPOINT, GCS_PROMPT, type GDocsConfig, type GDocsConfigRedacted, GDocsResource, type GDocsResourceState, type GDriveConfig, type GDriveConfigRedacted, GDriveResource, type GDriveResourceState, type GSheetsConfig, type GSheetsConfigRedacted, GSheetsResource, type GSheetsResourceState, type GSlidesConfig, type GSlidesConfigRedacted, GSlidesResource, type GSlidesResourceState, type GitHubCIConfig, type GitHubCIConfigRedacted, GitHubCIResource, type GitHubCIResourceState, type GitHubConfig, type GitHubConfigRedacted, GitHubResource, type GitHubResourceState, GmailResource, type GmailResourceState, HF_BUCKETS_PROMPT, HF_COMMANDS, HF_DATASETS_PROMPT, HF_ENDPOINT, HF_MODELS_PROMPT, HF_OPS, HF_RESOURCES, HF_SPACES_PROMPT, HfAccessor, HfBucketsAccessor, type HfBucketsConfig, type HfBucketsConfigRedacted, HfBucketsResource, type HfBucketsResourceState, HfDatasetsAccessor, HfDatasetsResource, type HfDatasetsResourceState, HfModelsAccessor, type HfModelsConfig, type HfModelsConfigRedacted, HfModelsResource, type HfModelsResourceState, type HfRepoConfig, type HfRepoConfigRedacted, HfSpacesAccessor, HfSpacesResource, type HfSpacesResourceState, LanceDBResource, type LanceDBResourceOptions, LanceDBStore, type LangfuseConfig, type LangfuseConfigRedacted, LangfuseResource, type LangfuseResourceState, type LinearConfig, type LinearConfigRedacted, LinearResource, type LinearResourceState, MINIO_PROMPT, type MinIOConfig, type MinIOConfigRedacted, MinIOResource, type MinIOResourceState, MirageFS, type MirageFSOptions, MongoDBResource, type MongoDBResourceOptions, MongoDBStore, type NotionConfig, type NotionConfigRedacted, NotionResource, type NotionResourceState, type OCIConfig, type OCIConfigRedacted, OCIResource, type OCIResourceState, OCI_PROMPT, PostgresResource, type PostgresResourceOptions, PostgresStore, QINGSTOR_PROMPT, type QingStorConfig, type QingStorConfigRedacted, QingStorResource, type QingStorResourceState, type R2Config, type R2ConfigRedacted, R2Resource, type R2ResourceState, R2_PROMPT, REDIS_COMMANDS, REDIS_OPS, REDIS_PROMPT, RedisAccessor, type RedisFileCacheOptions, RedisFileCacheStore, RedisResource, type RedisResourceLike, type RedisResourceOptions, type RedisResourceState, RedisStore, type RedisStoreOptions, type ResourceFactory, type S3Config, type S3ConfigRedacted, S3Resource, type S3ResourceState, SCALEWAY_PROMPT, SEAWEEDFS_PROMPT, SSHAccessor, type SSHConfig, type SSHConfigRedacted, SSHResource, type SSHResourceState, SSH_COMMANDS, SSH_OPS, SSH_PROMPT, SUPABASE_PROMPT, type ScalewayConfig, type ScalewayConfigRedacted, ScalewayResource, type ScalewayResourceState, type SeaweedFSConfig, type SeaweedFSConfigRedacted, SeaweedFSResource, type SeaweedFSResourceState, type SlackConfig, type SlackConfigRedacted, SlackResource, type SlackResourceState, type SupabaseConfig, type SupabaseConfigRedacted, SupabaseResource, type SupabaseResourceState, TENCENT_PROMPT, type TencentConfig, type TencentConfigRedacted, TencentResource, type TencentResourceState, type TrelloConfig, type TrelloConfigRedacted, TrelloResource, type TrelloResourceState, WASABI_PROMPT, type WasabiConfig, type WasabiConfigRedacted, WasabiResource, type WasabiResourceState, Workspace, assertHfRepoId, buildEmailConfig, buildResource, fileReadProvision, mount as fuseMount, mountBackground as fuseMountBackground, headTailProvision, isMacosMetadata, knownResources, loadDatabricksProfile, metadataProvision, normalizeBoxConfig, normalizeDiscordConfig, normalizeDropboxConfig, normalizeEmailConfig, normalizeGDocsConfig, normalizeGDriveConfig, normalizeGSheetsConfig, normalizeGSlidesConfig, normalizeGitHubCIConfig, normalizeGitHubConfig, normalizeHfBucketsConfig, normalizeHfModelsConfig, normalizeHfRepoConfig, normalizeLangfuseConfig, normalizeLinearConfig, normalizeNotionConfig, normalizeSlackConfig, normalizeSshConfig, normalizeTrelloConfig, parseDatabricksCfg, patchNodeFs, redactAliyunConfig, redactBackblazeConfig, redactBoxConfig, redactCephConfig, redactDigitalOceanConfig, redactDiscordConfig, redactDropboxConfig, redactEmailConfig, redactGDocsConfig, redactGDriveConfig, redactGSheetsConfig, redactGSlidesConfig, redactGcsConfig, redactGitHubCIConfig, redactGitHubConfig, redactHfBucketsConfig, redactHfModelsConfig, redactHfRepoConfig, redactLangfuseConfig, redactLinearConfig, redactMinIOConfig, redactNotionConfig, redactOciConfig, redactQingStorConfig, redactR2Config, redactConfig as redactS3Config, redactScalewayConfig, redactSeaweedFSConfig, redactSlackConfig, redactSshConfig, redactSupabaseConfig, redactTencentConfig, redactTrelloConfig, redactWasabiConfig, register as registerResourceFactory, resolvedAliyunEndpoint, resolvedBackblazeEndpoint, resolvedDigitalOceanEndpoint, resolvedQingStorEndpoint, resolvedScalewayEndpoint, resolvedSupabaseEndpoint, resolvedTencentEndpoint, resolvedWasabiEndpoint };
+export { ALIYUN_PROMPT, type AliyunConfig, type AliyunConfigRedacted, AliyunResource, type AliyunResourceState, BACKBLAZE_PROMPT, type BackblazeConfig, type BackblazeConfigRedacted, BackblazeResource, type BackblazeResourceState, type BoxConfig, type BoxConfigRedacted, BoxResource, type BoxResourceState, CEPH_PROMPT, type CephConfig, type CephConfigRedacted, CephResource, type CephResourceState, DEFAULT_STATE_ROOT, DIGITALOCEAN_PROMPT, DISK_COMMANDS, DISK_OPS, DISK_PROMPT, type DatabricksProfile, DatabricksVolumeResource, type DatabricksVolumeResourceState, type DigitalOceanConfig, type DigitalOceanConfigRedacted, DigitalOceanResource, type DigitalOceanResourceState, type DiscordConfig, type DiscordConfigRedacted, DiscordResource, type DiscordResourceState, DiskNamespaceStore, DiskObserverStore, DiskRecordClient, DiskResource, type DiskResourceOptions, type DiskResourceState, DiskSessionStore, DiskWorkspaceStateStore, type DiskWorkspaceStateStoreOptions, type DropboxConfig, type DropboxConfigRedacted, DropboxResource, type DropboxResourceState, EMAIL_COMMANDS, EMAIL_OPS, EMAIL_PROMPT, EMAIL_WRITE_PROMPT, EmailAccessor, type EmailConfig, type EmailConfigInput, type EmailConfigRedacted, EmailResource, type EmailResourceState, type FuseAttr, type FuseHandle, FuseManager, type MountOptions as FuseMountOptions, type GCSConfig, type GCSConfigRedacted, GCSResource, type GCSResourceState, GCS_ENDPOINT, GCS_PROMPT, type GDocsConfig, type GDocsConfigRedacted, GDocsResource, type GDocsResourceState, type GDriveConfig, type GDriveConfigRedacted, GDriveResource, type GDriveResourceState, type GSheetsConfig, type GSheetsConfigRedacted, GSheetsResource, type GSheetsResourceState, type GSlidesConfig, type GSlidesConfigRedacted, GSlidesResource, type GSlidesResourceState, type GitHubCIConfig, type GitHubCIConfigRedacted, GitHubCIResource, type GitHubCIResourceState, type GitHubConfig, type GitHubConfigRedacted, GitHubResource, type GitHubResourceState, GmailResource, type GmailResourceState, GridFSAccessor, type GridFSConfig, type GridFSConfigRedacted, GridFSResource, type GridFSResourceState, HF_BUCKETS_PROMPT, HF_COMMANDS, HF_DATASETS_PROMPT, HF_ENDPOINT, HF_MODELS_PROMPT, HF_OPS, HF_RESOURCES, HF_SPACES_PROMPT, HfAccessor, HfBucketsAccessor, type HfBucketsConfig, type HfBucketsConfigRedacted, HfBucketsResource, type HfBucketsResourceState, HfDatasetsAccessor, HfDatasetsResource, type HfDatasetsResourceState, HfModelsAccessor, type HfModelsConfig, type HfModelsConfigRedacted, HfModelsResource, type HfModelsResourceState, type HfRepoConfig, type HfRepoConfigRedacted, HfSpacesAccessor, HfSpacesResource, type HfSpacesResourceState, LanceDBResource, type LanceDBResourceOptions, LanceDBStore, type LangfuseConfig, type LangfuseConfigRedacted, LangfuseResource, type LangfuseResourceState, type LinearConfig, type LinearConfigRedacted, LinearResource, type LinearResourceState, MINIO_PROMPT, type MinIOConfig, type MinIOConfigRedacted, MinIOResource, type MinIOResourceState, MirageFS, type MirageFSOptions, MongoDBResource, type MongoDBResourceOptions, MongoDBStore, Mount, type MountSpecOptions, NEXTCLOUD_COMMANDS, NEXTCLOUD_OPS, NEXTCLOUD_PROMPT, NextcloudAccessor, type NextcloudConfig, type NextcloudConfigRedacted, NextcloudResource, type NextcloudResourceState, type NodeWorkspaceOptions, type NotionConfig, type NotionConfigRedacted, NotionResource, type NotionResourceState, type OCIConfig, type OCIConfigRedacted, OCIResource, type OCIResourceState, OCI_PROMPT, PostgresResource, type PostgresResourceOptions, PostgresStore, QINGSTOR_PROMPT, type QingStorConfig, type QingStorConfigRedacted, QingStorResource, type QingStorResourceState, type R2Config, type R2ConfigRedacted, R2Resource, type R2ResourceState, R2_PROMPT, REDIS_COMMANDS, REDIS_OPS, REDIS_PROMPT, RedisAccessor, type RedisFileCacheOptions, RedisFileCacheStore, RedisNamespaceStore, type RedisNamespaceStoreOptions, RedisObserverStore, type RedisObserverStoreOptions, RedisResource, type RedisResourceLike, type RedisResourceOptions, type RedisResourceState, RedisSessionStore, type RedisSessionStoreOptions, RedisStore, type RedisStoreOptions, RedisWorkspaceStateStore, type RedisWorkspaceStateStoreOptions, type ResourceFactory, type S3Config, type S3ConfigRedacted, S3Resource, type S3ResourceState, SCALEWAY_PROMPT, SEAWEEDFS_PROMPT, SSHAccessor, type SSHConfig, type SSHConfigRedacted, SSHResource, type SSHResourceState, SSH_COMMANDS, SSH_OPS, SSH_PROMPT, SUPABASE_PROMPT, type ScalewayConfig, type ScalewayConfigRedacted, ScalewayResource, type ScalewayResourceState, type SeaweedFSConfig, type SeaweedFSConfigRedacted, SeaweedFSResource, type SeaweedFSResourceState, type SlackConfig, type SlackConfigRedacted, SlackResource, type SlackResourceState, type SupabaseConfig, type SupabaseConfigRedacted, SupabaseResource, type SupabaseResourceState, TENCENT_PROMPT, type TencentConfig, type TencentConfigRedacted, TencentResource, type TencentResourceState, type TrelloConfig, type TrelloConfigRedacted, TrelloResource, type TrelloResourceState, WASABI_PROMPT, type WasabiConfig, type WasabiConfigRedacted, WasabiResource, type WasabiResourceState, Workspace, assertHfRepoId, buildEmailConfig, buildResource, fileReadProvision, mount as fuseMount, mountBackground as fuseMountBackground, headTailProvision, isMacosMetadata, knownResources, loadDatabricksProfile, metadataProvision, normalizeBoxConfig, normalizeDiscordConfig, normalizeDropboxConfig, normalizeEmailConfig, normalizeGDocsConfig, normalizeGDriveConfig, normalizeGSheetsConfig, normalizeGSlidesConfig, normalizeGitHubCIConfig, normalizeGitHubConfig, normalizeGridFSConfig, normalizeHfBucketsConfig, normalizeHfModelsConfig, normalizeHfRepoConfig, normalizeLangfuseConfig, normalizeLinearConfig, normalizeNextcloudConfig, normalizeNotionConfig, normalizeSlackConfig, normalizeSshConfig, normalizeTrelloConfig, parseDatabricksCfg, patchNodeFs, redactAliyunConfig, redactBackblazeConfig, redactBoxConfig, redactCephConfig, redactDigitalOceanConfig, redactDiscordConfig, redactDropboxConfig, redactEmailConfig, redactGDocsConfig, redactGDriveConfig, redactGSheetsConfig, redactGSlidesConfig, redactGcsConfig, redactGitHubCIConfig, redactGitHubConfig, redactHfBucketsConfig, redactHfModelsConfig, redactHfRepoConfig, redactLangfuseConfig, redactLinearConfig, redactMinIOConfig, redactNextcloudConfig, redactNotionConfig, redactOciConfig, redactQingStorConfig, redactR2Config, redactConfig as redactS3Config, redactScalewayConfig, redactSeaweedFSConfig, redactSlackConfig, redactSshConfig, redactSupabaseConfig, redactTencentConfig, redactTrelloConfig, redactWasabiConfig, register as registerResourceFactory, resolvedAliyunEndpoint, resolvedBackblazeEndpoint, resolvedDigitalOceanEndpoint, resolvedQingStorEndpoint, resolvedScalewayEndpoint, resolvedSupabaseEndpoint, resolvedTencentEndpoint, resolvedWasabiEndpoint };